CVE-2017-10172

The CVE affects Oracle Retail Open Commerce Platform (Framework subcomponent) across versions 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. An unauthenticated attacker with network access via HTTP can compromise the platform and may update, insert, delete, or read data due to a defined vulnerabili...